Latest Cybersecurity News and Articles

---

Teenagers, young adults pose prevalent cyberthreat to US, Mandiant says

A group of teenagers and individuals in their 20s from the U.S. and the U.K are among the most prevalent threat actors today, Mandiant Consulting CTO Charles Carmakal said Monday at an off-site media briefing during the RSA Conference.

---

Charming Kitten APT Uses BellaCiao Malware to Target Victims in US, Europe, Middle East, and India

This malware is tailored to suit individual targets and exhibits a higher level of complexity, evidenced by a unique communication approach with its command-and-control (C2) infrastructure.

---

Attackers are logging in instead of breaking in

Cyberattackers leveraged more than 500 unique tools and tactics in 2022, according to Sophos. The data was analyzed from more than 150 Sophos Incident Response (IR) cases.

---

EMV payments grew more than 350 percent in the last year

When it comes to preventing theft and fraud, security leaders need to consider how different transaction methods require different security measures. 

---

Bill proposes new DHS centers for testing security of critical government tech

The Critical Technology Security Centers Act of 2023 introduced Tuesday by Rep. Ritchie Torres (D-N.Y.) would create two cybersecurity-focused offices to evaluate and test the security of critical technology used by the federal government.

---

Charming Kitten's New BellaCiao Malware Discovered in Multi-Country Attacks

The prolific Iranian nation-state group known as Charming Kitten targeted multiple victims in the U.S., Europe, the Middle East and India with a novel malware dubbed BellaCiao, adding to its ever-expanding list of custom tools. Discovered by Bitdefender Labs, BellaCiao is a "personalized dropper" that's capable of delivering other malware payloads onto a victim machine based on commands received

---

Evasive Panda APT Group Delivers Malware via Updates for Popular Chinese Software

ESET Research uncovered a campaign by the APT group known as Evasive Panda targeting an international NGO in China with malware delivered through updates of popular Chinese software.

---

ViperSoftX Upgraded with Sophisticated Anti-Detection Techniques

There has been a significant number of victims in the consumer and enterprise sectors in Australia, Japan, and the U.S. after information-stealer ViperSoftX adopted new anti-detection capabilities. The enterprise sector made up over 40% of the total number of affected victims. The latest version of the info-stealer comes with the capability to steal passwords from two password managers such as KeePass 2 and 1Password.

---

Report reveals 65% of cyberattacks targeted at U.S.

A new report reveals an increase in cyberattacks directed at financial institutions, food retailers and healthcare providers, with 60% of all attacks targeting these three key industries.

---

Attackers Use Containers for Financial Gains via TrafficStealer

In a recent analysis, Trend Micro came across an unfamiliar program running in the background on their honeypot. It was meant to generate money by driving traffic to specific websites and engaging with ads.

---

Most SaaS adopters exposed to browser-borne attacks

Organizations in the cloud are exposed to web-borne attacks. 87% of all-SaaS adopters and 79% of CISOs in a hybrid environment experienced a web-borne security threat in the past 12 months, according to a global survey by LayerX.

---

Chinese Hackers Using MgBot Malware to Target International NGOs in Mainland China

The advanced persistent threat (APT) group referred to as Evasive Panda has been observed targeting an international non-governmental organization (NGO) in Mainland China with malware delivered via update channels of legitimate applications like Tencent QQ. The attack chains are designed to distribute a Windows installer for MgBot malware, ESET security researcher Facundo Muñoz said in a new

---

Chinese Hackers Deploy New Linux Malware Variants for Espionage

Chinese APT group Gallium is deploying new Linux malware variants in cyberespionage attacks, such as a new PingPull variant and a previously undocumented backdoor tracked as 'Sword2033.'

---

Browser Security Survey: 87% of SaaS Adopters Exposed to Browser-borne Attacks

The browser serves as the primary interface between the on-premises environment, the cloud, and the web in the modern enterprise. Therefore, the browser is also exposed to multiple types of cyber threats and operational risks.  In light of this significant challenge, how are CISOs responding? LayerX, Browser Security platform provider, has polled more than 150 CISOs across multiple verticals and

---

NetRise raises $8 million to advance XIoT security technology

NetRise announced $8 million in funding, led by Squadra Ventures, with participation by existing major investors Miramar Digital Ventures, Sorenson Ventures, and DNX Ventures.

---

Update: San Bernardino County sheriff's office struggling to recover from ‘malware’ incident

The attack began when an officer clicked on a malicious link, according to ABC7. Officials did not say whether data had been stolen during the attack. No ransomware group has come forward to claim the attack.

---

Quickpass Rebrands to CyberQP, Raises $12M to Help MSPs with Privileged Access Management

The company raised an additional $12M from its financial partner, Arthur Ventures, to continue to bring Privileged Access Management to MSPs. According to CEO Mateo Barraza, the rebranding was necessary to accurately portray the company's mission.

---

Russian hacktivist threat on Canada’s pipelines is ‘call to action,’ top cyber official says

The incident was revealed in a trove of leaked U.S. intelligence materials that included an apparently intercepted conversation between a hacking group known as Zarya and an officer at Russia’s Federal Security Service (FSB).

---

Apache Superset Vulnerability: Insecure Default Configuration Exposes Servers to RCE Attacks

The maintainers of the Apache Superset open source data visualization software have released fixes to plug an insecure default configuration that could lead to remote code execution. The vulnerability, tracked as CVE-2023-27524 (CVSS score: 8.9), impacts versions up to and including 2.0.1 and relates to the use of a default SECRET_KEY that could be abused by attackers to authenticate and access

---

Token Gets $30M Funding for Biometrics MFA Smart Ring

The new money comes in the form of a $20M secured note and a $10M convertible note and provides working capital and a runway for Token to compete in a crowded market for enterprise authentication products.